Ratecard
v1.0.2Ratecard integration. Manage Clients, Users. Use when the user wants to interact with Ratecard data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Ratecard and all runtime instructions center on using the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests — these needs align with the described purpose.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI, running authentication flows, listing/ running actions, and proxying requests. It does not instruct reading unrelated local files, accessing unrelated environment variables, or exfiltrating data.
Install Mechanism
This is an instruction-only skill (no installer), but it tells users to run `npm install -g @membranehq/cli` or use `npx ...@latest`. Installing/running third‑party npm packages executes external code under the user's control — normal for a CLI integration but worth reviewing/pinning the package and verifying the publisher before installing.
Credentials
The skill declares no required env vars or secrets and explicitly recommends letting Membrane manage credentials rather than asking for API keys. The Auth flow uses browser-based login handled by Membrane, which is proportionate to the task.
Persistence & Privilege
Skill has no elevated persistence flags (always is false) and does not request system-wide config changes or other skills' credentials. Autonomous invocation is allowed (the platform default) and appropriate for an integration skill.
Assessment
This skill appears to do what it claims: interact with Ratecard via the Membrane CLI. Before using it, verify the Membrane CLI package and publisher (check npm and the GitHub repo linked in the SKILL.md), prefer installing a pinned version rather than `@latest` if you need reproducibility, and be aware that installing a global npm package runs code on your machine. The skill uses a browser-based login so you will grant Membrane access to your Ratecard account — only proceed if you trust the Membrane service and its permissions, and revoke the connection later if you change your mind.Like a lobster shell, security has layers — review code before you run it.
latestvk97fcs8qb9eh4dsqprtjnsf1e1842vd5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.